PRIVACY RIGHTS

Exercise your privacy rights

Submit a request to access, delete, correct, obtain, restrict, object to, or otherwise exercise privacy rights that may apply to you. Available rights depend on your location and relationship with ZoikoSuite.

JURISDICTION & RELATIONSHIP ROUTER

Determine the right path — without deceptive eligibility friction

Step 1 — Where are you located?

Step 2 — Your relationship with ZoikoSuite

RIGHTS SELECTOR

Outcome-based labels — never a statute the visitor has to identify

Access / know

See personal information and how it is used or disclosed.

Delete

Ask for eligible personal information to be deleted.

Correct

Ask to correct inaccurate personal information.

Get a copy / portability

Receive eligible information in an appropriate portable format.

Object or restrict

Ask to stop or restrict certain processing where the right applies.

Limit sensitive information

Limit certain uses/disclosures where applicable.

Opt out of sale or sharing

Stop covered sale/sharing activity.

Automated decision rights

Request information or exercise rights related to covered automated decisions where applicable.

Other privacy request

Describe the outcome you want.

REQUEST FORM

Minimum data collection — one question per logical group

VERIFICATION ARCHITECTURE

Risk-tiered — proportionate to sensitivity and harm, never one-size-fits-all

Tier	Use Case	Pattern
V0	Low-risk opt-out/preference request where verification is not required	No identity proof — capture an enforceable preference signal.
V1	Low-risk correction/routing	Email or authenticated-session confirmation where sufficient.
V2	Access/delete involving account-linked data	Match multiple data points or authenticated account confirmation — avoid collecting new sensitive IDs unless necessary.
V3	High-risk/sensitive disclosure or representative uncertainty	Escalated Privacy Operations review with legally approved evidence and secure upload.

REVIEW, CONSENT & SUBMISSION

Prevent mistakes without adding ceremony

Element

Requirement

Review screen

Shows jurisdiction, relationship, selected right(s), scope, contact channel, and any verification step completed — every section has an Edit link; sensitive evidence/full identifiers are masked, not repeated.

Required declaration

"I confirm the information I provided is accurate to the best of my knowledge."

Representative-only declaration

Authority declaration and legally approved proof/attestation requirement.

Privacy notice link

Explains how request data itself is used and retained.

Buttons

Primary: "Submit privacy request." Secondary: "Back." No "Agree to Terms" checkbox unless Legal identifies a necessary request-specific declaration — exercising a right is never conditioned on unrelated contractual acceptance.

RECEIPT, REFERENCE & STATUS EXPERIENCE

Immediate trust after submission

Submitted

Reference ID, timestamp, request type, contact channel, next step.

Verification needed

Explains exactly what is needed and why; secure action link.

Received

Confirms intake and routing.

In review

Being evaluated/fulfilled — no misleading progress percentage.

Action required

Specific user action with deadline if applicable.

Extended

More time needed; reason/timing shown only after Legal validation.

Partially fulfilled

Separates fulfilled items from withheld/excepted items; explains next steps.

Fulfilled

Summarizes outcome and secure delivery/access method.

Denied

Plain-language reason category, legal basis/reference if approved, and appeal path where applicable.

Withdrawn

Confirms withdrawal and what records of the request are retained.

Closed

Closure reason and support path.

REQUEST LIFECYCLE & TIMING LOGIC

Operational state machine, from intake to closure

Intake

Normalized, dedup checked, routed

Verification

Identity/authority confidence reached

Applicability review

Right, scope, exemptions resolved

Discovery

Relevant systems identified

Fulfillment

Action executed or exception documented

QA

Completeness & disclosure safety

Delivery

Secure response delivered

Closure

Audit retained; temp evidence deleted

AUTHORIZED AGENT / REPRESENTATIVE FLOW

Authority, verification, and least-data design

Field

Rule

Representative name / organization

Required for the agent route.

Authority type

Signed permission, legal authority, parent/guardian, or other approved basis.

Evidence

Only when legally/operationally required; secure upload/attestation.

Consumer confirmation

Requested directly when applicable and legally permitted.

CUSTOMER-MANAGED DATA & CONTROLLER/PROCESSOR ROUTING

Preventing misdirected requests in enterprise SaaS

Scenario	User Experience
ZoikoSuite determines purpose/means	Continue through the ZoikoSuite rights workflow.
Customer determines purpose/means	Explains that the organization using ZoikoSuite may need to handle the request; provides customer-contact guidance if known and permitted.
Mixed data	Split internally or explain which portion ZoikoSuite can handle directly.
Unknown	The request is accepted and routed internally — never bounced without investigation.

SALES, CONVERSION & TRUST ALIGNMENT

Commercial value without contaminating the rights journey

This page contains no sales CTA inside the request flow. Its commercial role is trust conversion: demonstrating to prospects, customers, procurement teams, privacy counsel, and security reviewers that ZoikoSuite can operationalize privacy obligations rather than merely publish policy language.

Trust principle: the conversion event is successful rights exercise and increased confidence — not a demo request. No cross-sell, newsletter opt-in, ad pixels, or promotional banners appear on request or status pages.

FREQUENTLY ASKED